Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          sTaKihtPLYjx7XoNY2Yp3A+4LZy9Go4fyTWpTZ/LXlE=
Subject key identifier:   3C:D0:2A:57:D3:D1:3D:75:F3:B1:62:1C:64:FA:4A:52:36:59:D9:49
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019641E81E075993C106A99B7E53CFCA880C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          151A
Signing time:             Thu 17 Apr 2025 04:00:53 +0000
Manifest this update:     Thu 17 Apr 2025 04:00:53 +0000
Manifest next update:     Fri 18 Apr 2025 04:00:53 +0000
Files and hashes:         1: 6bhIWgLQxbAp4w8iIoK4TQEW4N0.roa (hash: KVboi8crnrOLsGeA88bhFJ6POQSaWb28pYwX5axEOtE=)
                          2: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: cGxBIqynnDHShyR3edYVS+7T5JecB+ajli+iZCX1f6c=)
                          3: K3O0AE3ipMAixLfcc54vqisf9Lk.roa (hash: 39lhfBxsDOQl4+NOlD/26yVUVPea0hcXtUuz/K2/lnU=)
                          4: Ny5zIYdEORHoaktmzqBhJlg15eU.roa (hash: 8s/IpUQd16S/jbNe07o2oL6oFrvSy6sNUQREu4sn1Ns=)
                          5: bbcQM14_wibjboqxlb73XNgGNuk.roa (hash: S8JvppRiDYyzxf9tLizafl4kxpltI7FSoBpu/hZzQ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e8:1e:07:59:93:c1:06:a9:9b:7e:53:cf:ca:88:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Apr 17 04:00:53 2025 GMT
            Not After : Apr 18 04:00:53 2025 GMT
        Subject: CN=3cd02a57d3d13d75f3b1621c64fa4a523659d949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:e4:54:9e:e8:14:d5:ea:95:ef:13:de:de:
                    12:0d:48:15:51:58:9c:91:8d:c8:98:67:6d:97:b7:
                    32:16:0f:ca:e7:6f:20:64:dd:d1:1c:39:73:2b:21:
                    d5:3f:82:88:16:0f:d0:d8:60:03:c6:84:b1:22:a1:
                    76:c7:7d:8d:b8:7e:5e:4c:29:c2:e3:06:ed:52:bb:
                    31:03:44:c5:38:de:79:32:21:43:f8:a3:8e:a5:8e:
                    97:6a:fa:cb:a7:e5:77:db:ab:2e:b6:89:d7:88:20:
                    82:7b:aa:ca:58:4a:f7:09:33:f0:57:03:12:95:31:
                    26:5f:be:57:1e:0a:f1:0f:29:8b:51:d9:57:d2:2d:
                    c7:08:b6:cf:e7:2c:ac:b0:65:cc:0e:2d:f8:ac:3c:
                    dd:ad:70:df:8a:6f:58:8a:ea:94:d0:00:f1:c2:16:
                    b6:13:06:03:3c:45:14:31:0b:53:95:a6:a2:1e:1e:
                    05:d3:d8:f0:b1:4b:ea:04:96:9d:ee:e6:60:06:71:
                    11:00:f8:45:b0:1c:f6:0c:d4:0f:d2:aa:4b:a7:63:
                    e6:fd:7e:92:36:e6:a5:67:39:c4:07:99:f4:7e:2f:
                    20:ff:8a:d6:dc:da:da:81:96:48:16:56:24:e2:ed:
                    d5:8d:58:e4:07:80:14:8e:93:65:51:bf:3f:41:b6:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D0:2A:57:D3:D1:3D:75:F3:B1:62:1C:64:FA:4A:52:36:59:D9:49
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:4c:a5:de:ec:15:42:a1:f4:ef:fa:74:fa:6b:7a:7f:ec:
         27:fd:1b:bd:d3:df:6a:39:7a:93:40:b2:01:21:10:71:4f:e0:
         a7:15:6d:d0:5f:6c:2f:9a:14:5a:15:0a:2e:10:3f:31:d7:ec:
         22:c6:81:0a:01:ce:e0:ff:8d:a3:4a:96:55:b1:09:d7:e6:f7:
         3a:5d:8e:84:d3:42:0c:a9:96:d2:91:69:6d:20:f1:f2:10:2c:
         ae:2a:44:80:d8:97:ad:d7:7b:f4:ea:37:48:87:cc:fe:cd:5c:
         5f:6d:de:5c:75:f2:47:ef:37:64:03:66:74:ce:7c:b4:58:15:
         a5:fb:fa:70:33:f9:c8:a0:00:f9:cd:8e:13:76:0c:40:27:39:
         9f:19:c9:59:1e:e2:e7:22:1f:92:83:b7:f6:cb:53:55:a4:de:
         4b:b2:e1:08:97:5a:35:e6:f4:62:11:1a:c2:9c:ad:0d:f8:b6:
         fa:68:07:85:16:68:e6:56:8e:74:7b:94:95:07:2c:26:77:fb:
         b6:1e:cd:22:a7:7a:5c:cb:73:b5:2f:a8:d6:fe:85:27:2c:76:
         1d:d3:a2:8e:9a:e3:59:4a:e9:b5:ff:02:84:81:ca:25:2c:7d:
         b9:73:cf:c1:0f:16:12:aa:b4:df:04:87:59:0f:52:15:cd:b8:
         35:22:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:51 2025 by rpki-client